CVE-2024-11054: SourceCodester Simple Music Cloud Community System ajax.php unrestricted upload
First published: Sun Nov 10 2024(Updated: )
A vulnerability classified as critical was found in SourceCodester Simple Music Cloud Community System 1.0. This vulnerability affects unknown code of the file /music/ajax.php?action=signup. The manipulation of the argument pp leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Simple Music Cloud Community System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-11054?
CVE-2024-11054 is classified as a critical vulnerability.
How does CVE-2024-11054 affect the Simple Music Cloud Community System?
CVE-2024-11054 affects the /music/ajax.php?action=signup file, allowing for unrestricted file uploads.
What is the vector of attack for CVE-2024-11054?
The vulnerability can be exploited by manipulating the pp argument in the signup action.
Can CVE-2024-11054 lead to remote code execution?
Yes, the unrestricted file upload could potentially allow for remote code execution.
How can I mitigate the risks associated with CVE-2024-11054?
To mitigate CVE-2024-11054, ensure you apply the latest security patches and validate file uploads properly.
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- agent/author
- agent/event
- agent/severity
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/source
- vendor/oretnom23
- canonical/oretnom23 simple music cloud community system
- version/oretnom23 simple music cloud community system/1.0